Skip to content
threatcrush security scan

ci: add ThreatCrush security scan #1

Sign in to view logs

ci: add ThreatCrush security scan

ci: add ThreatCrush security scan #1

Triggered via pull request August 3, 2026 10:30
@ralyodioralyodio
opened #256
chore/threatcrush-scan
Status Success
Total duration 35s
Artifacts 1

threatcrush-scan.yml

on: pull_request
Scan for credentials and vulnerable patterns
30s
Scan for credentials and vulnerable patterns
Fit to window
Zoom out
Zoom in

Annotations

2 warnings and 1 notice
Scan for credentials and vulnerable patterns
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/github-script@v7, actions/setup-node@v4, actions/upload-artifact@v4, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan for credentials and vulnerable patterns
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Scan for credentials and vulnerable patterns
CLI 0.2.2 predates --format; converting terminal output instead.

Artifacts

Produced during runtime
Name Size Digest
threatcrush-sarif
381 Bytes
sha256:68e75bd9455025c83b686cdbbff731f925349848c15a44037d3aa6eba383a900